Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KorTQVgsRr_I083Ct61RkkcX6X4.roa
File:                     KorTQVgsRr_I083Ct61RkkcX6X4.roa (raw, json)
Hash identifier:          Vd4KbY1TWsyK65/zUJDcWyf0whjWFqHN2bn4o15+sXU=
Subject key identifier:   2A:8A:D3:41:58:2C:46:BF:C8:D3:CD:C2:B7:AD:51:92:47:17:E9:7E
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246CE707A2D57AFBF73B0E65BB40E85
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KorTQVgsRr_I083Ct61RkkcX6X4.roa
Signing time:             Mon 02 Jan 2023 11:38:41 +0000
ROA not before:           Mon 02 Jan 2023 11:38:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202776
IP address blocks:        2a0c:9a40:8c30::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:ce:70:7a:2d:57:af:bf:73:b0:e6:5b:b4:0e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2a8ad341582c46bfc8d3cdc2b7ad51924717e97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:ed:88:bf:73:de:bb:94:18:97:b9:bc:34:
                    78:f5:66:2e:94:cd:f4:f5:36:a5:c0:df:30:af:32:
                    bd:40:00:0e:77:93:a7:e5:a8:c2:27:ff:73:c5:60:
                    a1:3a:31:02:20:b6:a9:de:20:30:72:b3:cd:65:c8:
                    3e:37:98:ba:1e:fc:75:ac:4b:f3:7a:85:58:0a:09:
                    b5:af:eb:d8:1c:03:c3:12:7d:52:21:85:45:28:58:
                    36:75:63:fa:21:db:06:03:ae:0f:3d:44:99:a9:22:
                    f5:13:d4:f1:52:4d:a2:37:8d:ae:d6:98:7a:fb:a8:
                    55:1d:c0:72:a4:35:66:11:49:4e:1c:92:50:cf:05:
                    9a:a7:08:8a:01:52:3b:fd:d1:d6:3a:d7:8d:fb:ff:
                    a0:40:1b:14:11:87:54:e2:9b:52:84:16:e4:d0:8d:
                    83:3f:cd:c0:2c:d6:f7:02:87:d6:db:78:03:48:15:
                    7a:f1:8e:ba:77:06:a6:07:3a:52:1a:7b:4a:09:34:
                    6c:06:d4:1e:f1:95:97:0b:d7:80:28:bf:15:80:13:
                    b5:03:ed:7b:12:5c:d5:10:b3:1e:e2:45:65:88:36:
                    d8:0d:a5:79:35:8e:78:1e:46:6d:01:31:31:05:e7:
                    61:8b:2d:fc:7c:42:c9:56:25:ef:7c:27:76:87:b5:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:D3:41:58:2C:46:BF:C8:D3:CD:C2:B7:AD:51:92:47:17:E9:7E
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KorTQVgsRr_I083Ct61RkkcX6X4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8c30::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:d9:8d:9d:b5:7f:a0:d4:cf:72:e4:a8:f0:0a:0d:31:c8:
         72:f9:bf:60:60:57:fe:85:98:d6:fc:eb:b5:7f:23:97:b2:b0:
         3c:38:04:09:66:db:0d:dc:e3:46:9c:90:dc:8a:5e:e6:c1:0a:
         c2:46:79:13:f9:a5:50:74:ff:bf:52:0e:12:94:46:4c:70:d1:
         62:cb:bf:b4:bd:ff:af:3d:85:62:a6:88:c1:8c:79:03:14:b1:
         74:4e:18:2d:45:22:ac:e5:10:8b:ca:4d:b4:1e:92:6b:d3:28:
         31:8e:78:cb:be:d8:03:f6:a5:94:b5:be:89:1e:ed:85:6b:22:
         cd:5f:14:47:52:67:2c:a2:ef:af:d9:8d:55:eb:b1:d5:96:3b:
         9e:4d:59:95:cf:f9:a2:f3:63:dd:e7:9b:62:d8:6f:b3:a6:e5:
         0a:5b:8b:17:38:78:3a:c3:05:46:b6:d5:8a:db:e6:cc:56:0d:
         a5:62:d3:40:b9:26:71:7f:98:e2:c4:5c:20:c5:99:c8:73:75:
         ae:95:a3:16:75:10:b3:ec:d7:5e:f5:39:5d:84:2e:66:54:7d:
         fe:ea:da:50:8d:b1:dd:f0:7c:f1:13:9f:d2:21:a5:15:c6:12:
         17:40:89:b7:70:e7:b9:30:6f:d4:a2:fd:97:b3:ba:ca:57:d1:
         72:4d:13:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----